Re: SSL/SSH certifiactes

[Daniel Bennett <dbennett () PCT EDU>]

You could obtain a wildcard certificate (*.domain.edu) and use fully qualified domain names (ap11.domain.edu) for all 
your devices.
Daniel Bennett
IT Security Analyst
Pennsylvania College of Technology
P:570.329.4989
E:dbennett () pct edu



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Entwistle, Bruce
Sent: Thursday, May 13, 2010 12:02 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SSL/SSH certifiactes

We are currently reviewing our network security.  One of the tools we are using in this process is reporting a 
vulnerability as a result of using self signed certificates on our Cisco IOS devices (switches, routers, access points) 
for ssh and ssl connections.  Rather than purchase 300 certificates to address this issue I thought I would ask what 
others are doing in this area.

Thank you
Bruce Entwistle
Network Manager
University of Redlands